Analysis
- max time kernel
294s - max time network
304s - platform
windows11-21h2_x64 - resource
win11-20240508-en - resource tags
- submitted
11/05/2024, 14:52
General
- Target 100virus.jar
- Size 639KB
- Sample240511-r8vgjsfc63
- SHA256 2acb09ed1bc32e9f0ffb1abae14398e7e76cee7d44663871b912160b53cffdff
Malware Config
Signatures
- Modifies file permissions 1 TTPs 1 IoCs
- Adds Run key to start application 2 TTPs 1 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 8 IoCs
- Views/modifies file attributes 1 TTPs 1 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\100virus.jar1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
-
C:\Windows\SYSTEM32\attrib.exeattrib +H C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1715439151880.tmp2⤵
- Views/modifies file attributes
-
-
C:\Windows\SYSTEM32\cmd.execmd.exe /c "REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Home /d "C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1715439151880.tmp" /f"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\reg.exeREG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v Home /d "C:\Program Files\Java\jre-1.8\bin\javaw.exe -jar C:\Users\Admin\AppData\Roaming\Microsoft\.tmp\1715439151880.tmp" /f3⤵
- Adds Run key to start application
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
imageio1305063717733602605.tmp
imageio1340475796211194320.tmp
imageio1857124478221161757.tmp
imageio1860024731938665509.tmp
imageio2861749167932816133.tmp
imageio5905537710383365808.tmp
imageio6564965300273372719.tmp
imageio7304077853829573382.tmp
imageio7510494708241334847.tmp
imageio7729239823383536630.tmp
imageio7794139147642235423.tmp
imageio7811264269030290346.tmp
1715439151880.tmp
memory/4708-112-0x0000021A00430000-0x0000021A00440000-memory.dmp
memory/4708-126-0x0000021A003D0000-0x0000021A003E0000-memory.dmp
memory/4708-40-0x0000021A00300000-0x0000021A00310000-memory.dmp
memory/4708-42-0x0000021A00000000-0x0000021A00270000-memory.dmp
memory/4708-44-0x0000021A00310000-0x0000021A00320000-memory.dmp
memory/4708-43-0x0000021A76080000-0x0000021A76081000-memory.dmp
memory/4708-49-0x0000021A00320000-0x0000021A00330000-memory.dmp
memory/4708-48-0x0000021A00270000-0x0000021A00280000-memory.dmp
memory/4708-53-0x0000021A00330000-0x0000021A00340000-memory.dmp
memory/4708-52-0x0000021A00280000-0x0000021A00290000-memory.dmp
memory/4708-56-0x0000021A00290000-0x0000021A002A0000-memory.dmp
memory/4708-57-0x0000021A00340000-0x0000021A00350000-memory.dmp
memory/4708-62-0x0000021A00350000-0x0000021A00360000-memory.dmp
memory/4708-61-0x0000021A002A0000-0x0000021A002B0000-memory.dmp
memory/4708-65-0x0000021A00360000-0x0000021A00370000-memory.dmp
memory/4708-64-0x0000021A002B0000-0x0000021A002C0000-memory.dmp
memory/4708-66-0x0000021A76080000-0x0000021A76081000-memory.dmp
memory/4708-70-0x0000021A00370000-0x0000021A00380000-memory.dmp
memory/4708-69-0x0000021A002D0000-0x0000021A002E0000-memory.dmp
memory/4708-68-0x0000021A002C0000-0x0000021A002D0000-memory.dmp
memory/4708-73-0x0000021A00380000-0x0000021A00390000-memory.dmp
memory/4708-72-0x0000021A002E0000-0x0000021A002F0000-memory.dmp
memory/4708-74-0x0000021A76080000-0x0000021A76081000-memory.dmp
memory/4708-77-0x0000021A00390000-0x0000021A003A0000-memory.dmp
memory/4708-76-0x0000021A002F0000-0x0000021A00300000-memory.dmp
memory/4708-79-0x0000021A00300000-0x0000021A00310000-memory.dmp
memory/4708-80-0x0000021A003A0000-0x0000021A003B0000-memory.dmp
memory/4708-83-0x0000021A00310000-0x0000021A00320000-memory.dmp
memory/4708-84-0x0000021A003B0000-0x0000021A003C0000-memory.dmp
memory/4708-86-0x0000021A00320000-0x0000021A00330000-memory.dmp
memory/4708-87-0x0000021A003C0000-0x0000021A003D0000-memory.dmp
memory/4708-90-0x0000021A00330000-0x0000021A00340000-memory.dmp
memory/4708-91-0x0000021A003D0000-0x0000021A003E0000-memory.dmp
memory/4708-94-0x0000021A00340000-0x0000021A00350000-memory.dmp
memory/4708-95-0x0000021A003E0000-0x0000021A003F0000-memory.dmp
memory/4708-99-0x0000021A003F0000-0x0000021A00400000-memory.dmp
memory/4708-98-0x0000021A00350000-0x0000021A00360000-memory.dmp
memory/4708-101-0x0000021A00360000-0x0000021A00370000-memory.dmp
memory/4708-102-0x0000021A00400000-0x0000021A00410000-memory.dmp
memory/4708-105-0x0000021A00410000-0x0000021A00420000-memory.dmp
memory/4708-104-0x0000021A00370000-0x0000021A00380000-memory.dmp
memory/4708-107-0x0000021A00380000-0x0000021A00390000-memory.dmp
memory/4708-108-0x0000021A00420000-0x0000021A00430000-memory.dmp
memory/4708-111-0x0000021A00390000-0x0000021A003A0000-memory.dmp
memory/4708-31-0x0000021A002E0000-0x0000021A002F0000-memory.dmp
memory/4708-114-0x0000021A003A0000-0x0000021A003B0000-memory.dmp
memory/4708-115-0x0000021A00440000-0x0000021A00450000-memory.dmp
memory/4708-118-0x0000021A003B0000-0x0000021A003C0000-memory.dmp
memory/4708-119-0x0000021A00450000-0x0000021A00460000-memory.dmp
memory/4708-122-0x0000021A003C0000-0x0000021A003D0000-memory.dmp
memory/4708-123-0x0000021A00460000-0x0000021A00470000-memory.dmp
memory/4708-36-0x0000021A002F0000-0x0000021A00300000-memory.dmp
memory/4708-127-0x0000021A00470000-0x0000021A00480000-memory.dmp
memory/4708-130-0x0000021A003E0000-0x0000021A003F0000-memory.dmp
memory/4708-131-0x0000021A00480000-0x0000021A00490000-memory.dmp
memory/4708-133-0x0000021A003F0000-0x0000021A00400000-memory.dmp
memory/4708-134-0x0000021A00490000-0x0000021A004A0000-memory.dmp
memory/4708-136-0x0000021A00400000-0x0000021A00410000-memory.dmp
memory/4708-137-0x0000021A004A0000-0x0000021A004B0000-memory.dmp
memory/4708-140-0x0000021A004B0000-0x0000021A004C0000-memory.dmp
memory/4708-139-0x0000021A00410000-0x0000021A00420000-memory.dmp
memory/4708-142-0x0000021A00420000-0x0000021A00430000-memory.dmp
memory/4708-145-0x0000021A00430000-0x0000021A00440000-memory.dmp
memory/4708-146-0x0000021A004C0000-0x0000021A004D0000-memory.dmp
memory/4708-149-0x0000021A00440000-0x0000021A00450000-memory.dmp
memory/4708-150-0x0000021A00450000-0x0000021A00460000-memory.dmp
memory/4708-151-0x0000021A004D0000-0x0000021A004E0000-memory.dmp
memory/4708-154-0x0000021A00460000-0x0000021A00470000-memory.dmp
memory/4708-155-0x0000021A004E0000-0x0000021A004F0000-memory.dmp
memory/4708-157-0x0000021A00470000-0x0000021A00480000-memory.dmp
memory/4708-158-0x0000021A004F0000-0x0000021A00500000-memory.dmp
memory/4708-160-0x0000021A00480000-0x0000021A00490000-memory.dmp
memory/4708-162-0x0000021A00490000-0x0000021A004A0000-memory.dmp
memory/4708-163-0x0000021A00500000-0x0000021A00510000-memory.dmp
memory/4708-165-0x0000021A004A0000-0x0000021A004B0000-memory.dmp
memory/4708-168-0x0000021A004B0000-0x0000021A004C0000-memory.dmp
memory/4708-169-0x0000021A00510000-0x0000021A00520000-memory.dmp
memory/4708-171-0x0000021A00520000-0x0000021A00530000-memory.dmp
memory/4708-174-0x0000021A004C0000-0x0000021A004D0000-memory.dmp
memory/4708-177-0x0000021A004D0000-0x0000021A004E0000-memory.dmp
memory/4708-178-0x0000021A00530000-0x0000021A00540000-memory.dmp
memory/4708-179-0x0000021A004E0000-0x0000021A004F0000-memory.dmp
memory/4708-180-0x0000021A00540000-0x0000021A00550000-memory.dmp
memory/4708-183-0x0000021A004F0000-0x0000021A00500000-memory.dmp
memory/4708-186-0x0000021A00550000-0x0000021A00560000-memory.dmp
memory/4708-185-0x0000021A00500000-0x0000021A00510000-memory.dmp
memory/4708-188-0x0000021A00510000-0x0000021A00520000-memory.dmp
memory/4708-190-0x0000021A00520000-0x0000021A00530000-memory.dmp
memory/4708-191-0x0000021A00530000-0x0000021A00540000-memory.dmp
memory/4708-194-0x0000021A00540000-0x0000021A00550000-memory.dmp
memory/4708-28-0x0000021A002C0000-0x0000021A002D0000-memory.dmp
memory/4708-29-0x0000021A002D0000-0x0000021A002E0000-memory.dmp
memory/4708-26-0x0000021A002B0000-0x0000021A002C0000-memory.dmp
memory/4708-23-0x0000021A002A0000-0x0000021A002B0000-memory.dmp
memory/4708-21-0x0000021A00290000-0x0000021A002A0000-memory.dmp
memory/4708-19-0x0000021A00280000-0x0000021A00290000-memory.dmp
memory/4708-18-0x0000021A00270000-0x0000021A00280000-memory.dmp
memory/4708-16-0x0000021A76080000-0x0000021A76081000-memory.dmp
memory/4708-2-0x0000021A00000000-0x0000021A00270000-memory.dmp
memory/4708-201-0x0000021A00550000-0x0000021A00560000-memory.dmp
memory/4708-258-0x0000021A76080000-0x0000021A76081000-memory.dmp
memory/4708-262-0x0000021A76080000-0x0000021A76081000-memory.dmp